Previous versions of the firefox and thunderbird packages are vulnerable
to several types of attacks, some of which are understood to allow
compromised or malicious sites to run arbitrary code as the user running
the vulnerable application.